Re: StackGuard

[Avery Pennarun <apenwarr@worldvisions.ca>]

On Mon, Nov 09, 1998 at 11:55:48AM +0100, J.H.M. Dassen Ray" wrote:

> > I know...this could slow the system and possibly other side trouble
> > but...this is my opinion: avery maintainer could compile 2 version of the
> > same package: package.deb and package_sg.deb, so everyone can take the
> > version he prefer..
> 
> I don't think this should be made a burden on all maintainers. IMO, this
> falls in the same category as providing Pentium I/Pro/II optimised versions,
> debugging version, statically linked versions etc. That's not something an
> individual package maintainer should provide; it's much more akin to a port,
> and should be treated as such. If someone wants to do work on a Debian
> i386-StackGuard port, great.

Actually, only daemons running as root, and setuid programs would need to be
compiled with stackguard.  Other programs are just as vulnerable to stack
overflows, but there's not much point in me crashing my own copy of ls :)

Now, how many daemons are still around that run as root... as few as
possible  :)

Have fun,

Avery